Cyber Security Consultant

4C Resourcing; Gartree; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading IT consultancy is seeking a Senior Cyber Security Consultant to lead client engagements and provide authoritative advice. The role includes delivering on governance, risk, and compliance frameworks while mentoring colleagues. The successful candidate will achieve UK Cyber Security Council Chartered status and enjoy hybrid working arrangements with a competitive salary of £50,000 - £70,000.

Benefits

25 days holiday + Bank holidays

Private Healthcare

3% Pension contributions

Employee Assistance Programme

Qualifications

• Experience in cyber security consulting or assurance, ideally within the public sector.
• Demonstrable readiness to achieve UK Cyber Security Council Chartered status.
• Strong client-facing skills and ability to communicate complex issues.

Responsibilities

• Lead and deliver engagements across governance, risk and compliance.
• Develop and present tailored security strategies for clients.
• Mentor and develop colleagues in the cyber practice.

Skills

Cyber Security Consulting

Stakeholder Engagement

GRC Frameworks Knowledge

Audit and Assurance

Incident Response Support

Education

UK Cyber Security Council Chartered status

Tools

ISO/IEC 27001

PCI DSS

Job description

Overview

Cyber Security Consultant

4C Strategies is one of the leading independent IT consultancies in the UK public sector. As part of our exciting growth plans, we are looking to expand our emerging cyber team with the recruitment of a Senior Cyber Security Consultant.

The Role

As part of our continued growth, we are seeking a Senior Cyber Security Consultant who has already achieved, or is on a clear path to achieving, UK Cyber Security Council Chartered status.

This is a senior role for an experienced consultant who can lead engagements, provide authoritative advice, and help shape our cyber security services. You will work primarily in Audit & Assurance and Risk & Compliance, with the opportunity to contribute to Incident Response where needed. There will also be opportunities to define and lead other areas of cyber security.

What you'll be doing

• Lead and deliver client engagements across governance, risk and compliance (GRC), including audits, assessments and improvement plans aligned to frameworks such as ISO/IEC 27001, NCSC CAF, and PCI DSS.
• Lead independent assurance, review and test security policies, procedures and controls; identify gaps; and recommend pragmatic remediation strategies.
• Develop and present security strategies that enhance resilience and reduce risk, tailored to client environments.
• Engage stakeholders, facilitate workshops, brief senior leaders, and build trusted relationships across client and supplier teams.
• Produce high-quality deliverables, audit reports, risk assessments, control mappings, and remediation roadmaps.
• Stay ahead of the curve, monitor emerging threats, regulations and standards, and translate these into actionable guidance.
• Support incident response activities where required, providing expertise during investigations and post-incident reviews.
• Mentor and develop colleagues, sharing knowledge and contributing to the growth of our cyber practice.

What you'll bring

• UK Cyber Security Council Chartered status (or demonstrable readiness to achieve this in the near term).
• Significant experience in cyber security consulting or assurance, ideally within the public sector.
• Deep knowledge of GRC frameworks and standards (e.g. CAF, ISO/IEC 27001, PCI DSS).
• Strong client-facing skills, able to communicate complex issues clearly to technical and non-technical audiences.
• Proven track record of delivering high-quality outputs on time and influencing decision-making.
• Excellent written and verbal communication, including the ability to produce polished consultancy reports.
• Desirable certifications: ISO 27001 Lead Auditor/Implementer, CISSP, CISM, CRISC, CCP (GRC), or equivalent.
• Driving license and willingness to travel to client sites across the UK as required.

Why join 4C Strategies?

• Work with a growing cyber team in a respected consultancy with strong public sector credentials.
• Hybrid working, home-based with weekly (Thursday) office collaboration (in Market Harborough) and client site visits as needed.
• Professional development, support for CPD, including maintaining Chartered status and relevant certifications.
• Varied engagements, opportunities to work across multiple domains, including incident response.

Package

• Between £50,000 - £70,000, subject to experience
• 3% Pension contributions
• 25 days holiday + Bank holidays
• Option to purchase an additional 5 days holiday
• Home based with an expectation of 1 day in the office per week and work on UK client sites as required
• Private Healthcare
• Employee Assistance Programme
• Commitment to on-going training

Equal Opportunities

4C Strategies is an equal opportunities employer. We celebrate diversity and are committed to creating an inclusive environment for all colleagues